IBM Directory Server Version 5.1: Web Administration Tool README

Transcription

1 IBM Directory Server Version 5.1: Web Administration Tool README

2 Note Before using this information and the product it supports, read the general information under 3.0 Notices on page 8.

3 Preface This README file contains information about the IBM Directory Server Version 5.1 Web Administration Tool. This product is available on the AIX, Linux, HP-UX, Solaris, Windows NT, Windows 2000, and Windows XP (client only) platforms. The server README (server.pdf, server.htm, or server.txt) and a separate README file describing the IBM Directory Server Client SDK (client.pdf, client.htm, or client.txt) can be found on the machines where they are installed in the following directories : v v v v v for AIX: /usr/ldap/language/readme/<filename>. (For English, language is en_us.) for Linux Intel and Linux S/390 : /usr/ldap/web/language/readme/<filename>. (For English, language is en_us.) for Windows platforms: installation directory\web\language\readme\<filename>. (For English, language is enus1252.) for Solaris: /opt/ibmldaps/web/language/readme/<filename>. (For English, language is en_us.) for HP-UX: /usr/ibmldap/web/language/readme/<filename>. (For English, language is en_us.) iii

4 iv IBM Directory Server Version 5.1: Web Administration Tool README

5 Contents Preface iii 1.0 On-line documentation Restrictions, known problems, troubleshooting, and additional information Additional login panels fail ldapmodify puts Web Administration into inconsistent state Web Administration Tool problems on Netscape WebSphere Application Server - Express on AIX Web Administration Tool loses connections on HP-UX Error when deleting the currently logged in user Caching problems using Netscape and embedded version of IBM WebSphere Application Server - Express on the same machine Web Administration tabs, table headers, and static list boxes are displayed in incorrect language Credentials not available from cn=replication,cn=localhost in certain situations Password encryption available in configuration mode only Web Administration does not return entries when searching referrals List boxes too short on native Windows machines using pre-internet Explorer 6.0 Web browser HTML special characters are not displayed correctly Web Administration requires IBM JDK on a Domino server Schema information shipped with the server is in English Notices Trademarks v

6 vi IBM Directory Server Version 5.1: Web Administration Tool README

7 1.0 On-line documentation In addition to the READMEs, on-line documents including the QuickStart, the Installation and Configuration Guide, the Administration Guide, the Tuning Guide, the C-Client SDK Programming References, the Server Plug-in Reference are provided in PDF and HTML formats. These files are located on the machine where the server or client has been installed. The IBM Directory Server Version 5.1 uses the JNDI client from Sun Microsystems. For information about the JNDI client, go to the Sun Microsystems Web site at Note: To view or print the PDF documentation you can download a copy of the Adobe Acrobat Reader from the Adobe Web site: For Windows systems: QuickStart file:\installation path\web\language\config\quickstart.pdf or quickstart.htm. The Installation and Configuration Guide file:\installation path\web\language\config\ldapinst.pdf or ldapinst.htm. The Administration Guide file:\installation path\web\language\config\admin_gd.pdf or admin_gd.htm.. The IBM Directory Server Tuning Guide file:\installation path\web\language\config\tuning.pdf or tuning.htm The C Programming Reference file:\installation path\web\language\doc\progref.pdf or progref.htm The Server Plug-ins Reference file:\installation path\web\language\doc\plugin.pdf or plugin.htm For AIX systems: QuickStart file:/usr/ldap/web/language/config/quickstart.pdf or quickstart.htm. The Installation and Configuration Guide file:/usr/ldap/web/language/config/ldapinst.pdf or ldapinst.htm. The Administration Guide file:/usr/ldap/web/language/config/admin_gd.pdf or admin_gd.htm. The IBM Directory Server Tuning Guide file:/usr/ldap/web/language/config/tuning.pdf or tuning.htm. The C Programming Reference file:/usr/ldap/web/language/doc/progref.pdf or progref.htm. The Server Plug-ins Reference file:/usr/ldap/web/language/doc/plugin.pdf or plugin.htm. For Solaris systems: 1

8 QuickStart file:/opt/ibmldaps/web/language/config/quickstart.pdf or quickstart.htm. The Installation and Configuration Guide file:/opt/ibmldaps/web/language/config/ldapinst.pdf or ldapinst.htm. The Administration Guide file:/opt/ibmldaps/web/language/config/admin_gd.pdf or admin_gd.htm. The IBM Directory Server Tuning Guide file:/opt/ibmldaps/weblanguage/config/tuning.pdf or tuning.htm. The C Programming Reference file:/opt/ibmldaps/web/language/program/progref.pdf or progref.htm The Server Plug-ins Reference file:/opt/ibmldaps/web/language/program/plugin.pdf or plugin.htm For Linux Intel and Linux S/390 systems: QuickStart file:/usr/ldap/web/language/config/quickstart.pdf or quickstart.htm. The Installation and Configuration Guide file:/usr/ldap/web/language/config/ldapinst.pdf or ldapinst.htm. The Administration Guide file:/usr/ldap/web/language/config/admin_gd.pdf or admin_gd.htm. The IBM Directory Server Tuning Guide file:/usr/ldap/web/language/config/tuning.pdf or tuning.htm. The C Programming Reference file:/usr/ldap/web/language/doc/progref.pdf or progref.htm The Server Plug-ins Reference file:/usr/ldap/web/language/doc/plugin.pdf or plugin.htm For HP-UX systems: QuickStart file:/usr/ibmldap/web/language/config/quickstart.pdf or quickstart.htm. The Installation and Configuration Guide file:/usr/ibmldap/web/language/config/ldapinst.pdf or ldapinst.htm. The Administration Guide file:/usr/ibmldap/web/language/config/admin_gd.pdf or admin_gd.htm. The IBM Directory Server Tuning Guide file:/usr/ibmldap/web/language/config/tuning.pdf or tuning.htm. The C Programming Reference file:/usr/ibmldap/web/language/doc/progref.pdf or progref.htm The Server Plug-ins Reference file:/usr/ibmldap/web/language/doc/plugin.pdf or plugin.htm Further information is available on the Web. Find the IBM Directory Server page at for general information and announcements. 2 IBM Directory Server Version 5.1: Web Administration Tool README

9 2.0 Restrictions, known problems, troubleshooting, and additional information 2.1 Additional login panels fail When using the Web Administration Tool, do not open additional login panels from the File options of the browser. Only one instance of the Web Administration can function on a single browser instance. They cannot share the same cookies. Additional login panels must be opened from new instances of the browser. For Unix-based systems: Launch new windows from the command line using the & option. For example: netscape & For Windows-based systems: v Internet Explorer - Open additional Internet Explorer windows using the Start window or an Internet Explorer short cut from the desktop. v Netscape - The Netscape Web browser does not support multiple Web Administration Tool sessions on Windows. 2.2 ldapmodify puts Web Administration into inconsistent state If you are logged into the Web Administration Tool and you change your password using the command line (ldapmodify), the Web Administration Tool changes the server status to stopped. This occurs because the Web Administration Tool opens new connections to the server every time it launches a task. The Web Administration Tool tries to connect to the server with the old password, because it is unaware that the password has been changed, consequently the connection fails. You must log out and log back in using the new password. To avoid this situation, if you have sufficient access authority, use the User properties -> Change password option to change your user password when working in the Web Administration Tool. 2.3 Web Administration Tool problems on Netscape 7.0 If Netscape 7.0 is run with the default profile, Web Administration tabbed panels do not display correctly. If using a language setting other than English, blank pages are displayed as well. The work around for this problem is to create another user profile. To do this: 1. Access the Profile Manager in Netscape 7.0 v On a Windows system - click Start -> Programs -> Netscape 7.0 -> Profile Manager v On a UNIX systema. Launch Netscape 7.0. This uses the default profile. b. Launch a second session of Netscape 7.0. This causes the Profile Manager panel to be displayed because the default profile is in use on the first session. 2. Click Create Profile and type Default User as the new profile name. 3

10 3. Click Next. 4. Click Next. 5. Click Finish. 6. Select Default User and click Start Netscape You see a Connecting to server progress message bar as the Netscape Network Registration panel is displayed. 8. At the Current Member Sign In field, enter some value into the Screen Name and Password fields. These values can be anything, the fields just need some content. 9. Click Next. 10. A message, You provided an invalid Screen Name and password. Please go back and try again is displayed. Ignore this message and click Finish. 11. The Netscape browser window is displayed. 12. Log into the Web Administration Tool in the browser session with the Default User profile. The Web Administration panels display correctly. 2.4 WebSphere Application Server - Express on AIX Starting the embedded version of IBM WebSphere Application Server - Express on AIX (startserver.sh server1), might not work because port (9090) already being used. See the BOBCAT_install_path/logs/server1 directory for the actual log files. Usually SystemErr.log and SystemOut.log are most helpful, although the other logs might have some useful information. To change the port number for the embedded version of IBM WebSphere Application Server - Express from 9090 to an unused port, for example, 9091 which is the port used on AIX machines. Edit the BOBCAT_install_path/config/cells/DefaultNode/virtualhosts.xml file and change 9090 to Do the same thing in the BOBCAT_install_path/config/cells/DefaultNode/nodes/DefaultNode/ servers/server1/server.xml file. Note: This path does have two subdirectories called DefaultNode. Make one change in each file for a total of two updates. 2.5 Web Administration Tool loses connections on HP-UX If you are using the Web Administration Tool on the HP-UX operating system, you must set the following variables, otherwise the kernel can not allocate enough threads and the system runs out of memory. The following table contains the parameters and values that must be set before installing Web Administration Tool. Table 1. HP-UX operating system kernel configuration parameters Kernel parameter Value 256MB+ physical memory max_thread_proc 1024 maxusers 256 nproc 2086(+) nkthread 3635(+) 4 IBM Directory Server Version 5.1: Web Administration Tool README

11 Note: After you update the max_thread_proc and maxusers parameters, be sure that the nproc parameter is set to 2068 or more, and the nkthread parameter to 3635 or more. Use this procedure to set the kernel configuration parameters: 1. At a command prompt, type: sam The System Administration Manager opens. 2. Double-click Kernel Configuration. 3. Double-click Configurable Parameters. 4. Double-click the parameter you want to edit and specify the new value in the Enter New Formula/Value field. Click OK. 5. Repeat step 4 for each parameter that needs to be set. 6. Click Actions-->Process New Kernel. 7. To process the modifications, click Yes. 8. Select Move Kernel Into Place and Shutdown/Reboot Now and click OK. See the IBM Directory Server Version 5.1 Installation and Configuration Guide for additional parameter settings. 2.6 Error when deleting the currently logged in user When you are logged into the console, the Web Administration Tool does not permit you to delete the entry that you are logged on as. For example, if you logged on as user cn=john Doe,ou=mylocale,o=mycompany,c=mycountry, and you try to delete the entry, cn=john Doe from that tree, you receive an error message. You must log on as some other user to delete the John Doe entry. 2.7 Caching problems using Netscape and embedded version of IBM WebSphere Application Server - Express on the same machine If you are using Netscape with embedded version of IBM WebSphere Application Server - Express on the same machine to access the Web Administration Tool, you might encounter prefilled or fragmented pages when performing administration tasks. The pages are being retrieved from the browser cache instead of from the application server. To correct this situation you need to turn off the caching function on the browser. From the Netscape tool bar: 1. Click Edit. 2. Click Preferences. 3. Expand Advanced. 4. Click Cache. 5. In the Document in cache is compared to document in network: field, click the Never radio button. 6. Click OK. Note: This procedure might change depending on the level of the Web browser you are using. 2.0 Restrictions, known problems, troubleshooting, and additional information 5

12 2.8 Web Administration tabs, table headers, and static list boxes are displayed in incorrect language This is a problem that has been encountered on the HP-UX and AIX operating systems, however, other UNIX-based systems might encounter the same problem. The environment variables LC_ALL and LANG need to be set to a native locale supported by Java, for example en_us.iso They must not be set to either POSIX or C. export LC_ALL=<new language> export LANG=<new language> The translation of the tabs, table headers, and static list boxes are saved in the language that was first used by the application server the first time a user logs into the Web Administration Tool application. If you change the locale on your machine, you might see the following exception: java.lang.internalerror: Can t connect to X11 window server using :0.0 as the value of the DISPLAY variable. at sun.awt.x11graphicsenvironment.initdisplay(native Method) at sun.awt.x11graphicsenvironment.<clinit> (X11GraphicsEnvironment.java:58) at java.lang.class.forname0(native Method) at java.lang.class.forname(unknown Source) at java.awt.graphicsenvironment.getlocalgraphicsenvironment (GraphicsEnvironment.java:53) at sun.awt.motif.mtoolkit.<clinit>(mtoolkit.java:63) at java.lang.class.forname0(native Method) at java.lang.class.forname(unknown Source) at java.awt.toolkit$2.run(toolkit.java:507) at java.security.accesscontroller.doprivileged(native Method) at java.awt.toolkit.getdefaulttoolkit(toolkit.java:498) at java.awt.toolkit.geteventqueue(toolkit.java:1171) at java.awt.eventqueue.invokelater(eventqueue.java:506) at javax.swing.swingutilities.invokelater(swingutilities.java:1086) at javax.swing.timer.post(timer.java:337) at javax.swing.timerqueue.postexpiredtimers(timerqueue.java:190) at javax.swing.timerqueue.run(timerqueue.java:226) at java.lang.thread.run(unknown Source) To correct this exception, you must export the DISPLAY variable so that it is a valid machine, for example the machine on which the application server is running. Then perform xhost + on the application server machine. On the machine where you want to export the DISPLAY to, issue the command: export DISPLAY=<valid machine name>:0 On the <valid machine name> issue the command: xhost Credentials not available from cn=replication,cn=localhost in certain situations In most replication cases, locating credentials in cn=replication,cn=localhost is preferred because it provides greater security than replicated credentials located on the subtree. However, there are certain situations in which credentials located on cn=replication,cn=localhost are not available. 6 IBM Directory Server Version 5.1: Web Administration Tool README

13 If you are trying to add a replica under a server, for example servera and you are connected to a different server with the Web Administration Tool, serverb, the Select credentials field does not display the option cn=replication,cn=localhost. This is because you cannot read the information or update any information under cn=localhost of the servera when you are connected to serverb. The cn=replication,cn=localhost is only available when the server under which you are trying to add a replica is the same server that you are connected to with the Web Administration Tool Password encryption available in configuration mode only Although the password policy feature is not available in configuration only mode, you can change your level of password encryption in configuration only mode Web Administration does not return entries when searching referrals When searching for entries using the Web Administration Tool, you can select to chase referrals. However, if an entry is found on the referred server, the Search results panel shows only the DN of the entry. Other columns such as object class, modified timestamp and so forth are not shown. Also you are not able to perform such operations as Edit Acls, Delete, Add auxiliary or Delete auxiliary on the referral entry List boxes too short on native Windows machines using pre-internet Explorer 6.0 Web browser On native Windows using pre-internet Explorer 6.0 Web browsers, list boxes might cut off part of the last character of the largest item in the list box. This is a browser limitation. Upgrading to Internet Explorer 6.0 might correct this problem HTML special characters are not displayed correctly Special characters in read-only data coming from the server are not displayed correctly in the HTML page. This is because of the way that the HTML is rendered by the Web browsers. A string containing multiple spaces such as a b is rendered as a b or a string containing the < special character is truncated for example, abc<abc is rendered as abc. This affects such fields as labels, drop-down boxes, tables, captions and so forth Web Administration requires IBM JDK on a Domino server If you want to use the Web Administration Tool with a Domino server you need to use the IBM JDK. Using the JDK form Sun results in communication exceptions. The following are limitations on the Domino server: v Manage schema functions do not work. v Domino does not support user defined suffixes. 2.0 Restrictions, known problems, troubleshooting, and additional information 7

14 Note: The standard suffix on the Domino server is a blank. Consequently, to view entries you must select the radio button with the plus sign (+) next to it and click Expand Schema information shipped with the server is in English The schema information shipped with the server, such as object class descriptions and syntax, is in English. It is not translated. 3.0 Notices This information was developed for products and services offered in the U.S.A. IBM might not offer the products, services, or features discussed in this document in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user s responsibility to evaluate and verify the operation of any non-ibm product, program, or service. IBM may have patents or pending patent applications covering subject matter in this document. The furnishing of this document does not give you any license to these patents. You can send license inquiries, in writing, to: IBM Director of Licensing IBM Corporation North Castle Drive Armonk, NY U.S.A. For license inquiries regarding double-byte (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to: IBM World Trade Asia Corporation Licensing 2-31 Roppongi 3-chome, Minato-ku Tokyo 106, Japan The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION AS IS WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you. This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the information. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this information at any time without notice. Any references in this information to non-ibm Web sites are provided for convenience only and do not in any manner serve as an endorsement of those Web 8 IBM Directory Server Version 5.1: Web Administration Tool README

15 sites. The materials at those Web sites are not part of the materials for this IBM product and use of those Web sites is at your own risk. IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you. Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact: IBM Corporation Department LZKS Burnet Road Austin, TX U.S.A. Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee. The licensed program described in this document and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Program License Agreement, or any equivalent agreement between us. Any performance data contained herein was determined in a controlled environment. Therefore, the results obtained in other operating environments may vary significantly. Some measurements may have been made on development-level systems and there is no guarantee that these measurements will be the same on generally available systems. Furthermore, some measurement may have been estimated through extrapolation. Actual results may vary. Users of this document should verify the applicable data for their specific environment. Information concerning non-ibm products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-ibm products. Questions on the capabilities of non-ibm products should be addressed to the suppliers of those products. All statements regarding IBM s future direction or intent are subject to change or withdrawal without notice, and represent goals and objectives only. All IBM prices shown are IBM s suggested retail prices, are current and are subject to change without notice. Dealer prices may vary. Trademarks The following terms are trademarks of International Business Machines Corporation in the United States, or other countries, or both: AIX Domino IBM S/390 WebSphere 2.0 Restrictions, known problems, troubleshooting, and additional information 9

16 Java is a registered trademark of Sun Microsystems, Inc.. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. UNIX is a registered trademark of The Open Group. Other company, product, and service names may be trademarks or service marks of others. 10 IBM Directory Server Version 5.1: Web Administration Tool README